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1 PRMexpeto 

^ Thomas S. Messerges, Ezzat A. Dabbish 

^ October 2003 Proceedings of the 3rd ACM workshop on Digital rights management 
DRM '03 

Publisher: ACM Press 

Additional Information: MLcjtation, abstract, references, citings, Index 
terms 



Full text available: ■£§ pdf(306,59 KB) 



In this paper we examine how copyright protection of digital items can be securely 
managed in a 3G mobile phone and other devices. First, the basic concepts, strategies, 
and requirements for digital rights management are reviewed. Next, a framework for 
protecting digital content in the embedded environment of a mobile phone is proposed 
and the elements in this system are defined. The means to enforce security in this system 
are described and a novel "Family Domain" approach to content management ... 

Keywords: MPEG-21, copyright protection, cryptography, digital content, digital rights 
management, embedded system, key management, mobile phone, open mobile alliance, 
security 
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Fast detection of communication patterns in distributed executions 
Thomas Kunz, Michiel F. H. Seuren 

November 1997 Proceedings of the 1997 conference of the Centre for Advanced 

Studies on Collaborative research 
Publisher: IBM Press 

Full text available: ^| pdf(4,21 MS) Additional Information: full citation, abstract, referees. Index terms 

Understanding distributed applications is a tedious and difficult task. Visualizations based 
on process-time diagrams are often used to obtain a better understanding of the 
execution of the application. The visualization tool we use is Poet, an event tracer 
developed at the University of Waterloo. However, these diagrams are often very complex 
and do not provide the user with the desired overview of the application. In our 
experience, such tools display repeated occurrences of non-trivial commun ... 

Systems: Authorization for digital ri ghts management in the geospatia! domain 
Andreas Matheus 

November 2005 Proceedings of the 5th ACM workshop on Digital rights management 
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DRM '05 

: Publisher: ACM Press 

Full text available: *| |pdff829.98 K3) Additional Information: full citation, abstract, references, index terms 

Since information is available in digital format, the protection of intellectual property and 
copyright fraud has become an important issue. This is, because the digital content can be 
copied without quality loss and with a reasonable effort of time, equipment and money. 
After copying, it can be distributed using the Internet, again with little effort of time and 
money. In such an environment, the loss of revenue for the music and film industry — not 
only due to sites like Napster — is becomin ... 

Keywords: DRM, access control, geoXACML, geospatial 



Service infastructure and network management: MobiDesk: mobile virtual desktop 
computing 

Ricardo A. Baratto, Shaya Potter, Gong Su, Jason Nieh 

September 2004 Proceedings of the 10th annual international conference on Mobile 

computing and networking 
Publisher: ACM Press 

Full text available: ^.p.dg580 : 39 K3j Additional Information: Ml .citation, abstract references, index terrns 

We present MobiDesk, a mobile virtual desktop computing hosting infrastructure that 
leverages continued improvements in network speed, cost, and ubiquity to address the 
complexity, cost, and mobility limitations of today's personal computing infrastructure. 
MobiDesk transparently virtualizes a user's computing session by abstracting underlying 
system resources in three key areas: display, operating system, and network. It provides 
a thin virilization layer that decouples a user's computing ses ... 

Keywords: computer utility, network mobility, on-demand computing, process migration, 
thin-client computing, virtualization 



5 Peris^^ 

Daniel Thull, Roberto Sannino 

March 2005 Proceedings of the conference on Design, Automation and Test in Europe 
- Volume 3 

Publisher: IEEE Computer Society 

Full text available: ^pdfl139.3S KB) Additional Information: full citation , abstract 

As digital content services gain importance in the mobile world, Digital Rights 
Management (DRM) applications will become a key component of mobile terminals. This 
paper examines the effect dedicated hardware macros for specific cryptographic functions 
have on the performance of a mobile terminal that supports version 2 of the open 
standard for Digital Rights Management defined by the Open Mobile Alliance (OMA). 
Following a general description of the standard, the paper contains a detailed analy ... 

Keywords: DRM, Security, Mobile Terminal, Cryptography 



6 Role-based access control on the Web using Java B 
rffc Luigi Giuri 

W October 1999 Proceedings of the fourth ACM workshop on Role-based access control 
Publisher: ACM Press 

Full text available: *P | pdf(729.08 KB) Additional Information: full citation , references, citing s, incjex terms 
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Service infestructure and network management: Usiogcode collection, to ^mort 
large applications on mobile devices 

Lucian Popa, Irina Athanasiu, Costin Raiciu, Raju Pandey, Radu Teodorescu 

September 2004 Proceedings of the 10th annual international conference on Mobile 

computing and networking 
Publisher: ACM Press 

Full text available: '* P i pdf(252.95 KB) Additional Information: full citation, abstract. references, index terms 



The progress of mobile device technology unfolds a new spectrum of applications that 
challenges conventional infrastructure models. Most of these devices are perceived by 
their users as "appliances" rather than computers and accordingly the application 
management should be done transparently by the underlying system unlike classic 
applications managed explicitly by the user. Memory management on such devices should 
consider new types of mobile applications involving code mobility such as mobile ... 



Keywords: caching, code collection, garbage collection 



8 Computer security: Neutralizing windows-based malicious mobile code 

James A. Whittaker, Andres De Vivanco 
W March 2002 Proceedings of the 2002 ACM symposium on Applied computing 

Publisher: ACM Press 

Additional Information: full citation, abstract, references, citings, index 



Full text available: mpdg840,36 KB) 

>e,[rns> 

Mobile code— executable programs that get copied from computer-to-computer via e- 
mail, web browsers, etc.— is a popular way to stage malicious attacks against users. The 
Windows operating system is often the target of such attacks, in part because of its 
ubiquity and in part because of the vast functionality it provides. Some of this 
functionality, like executable e-mail attachments and scripting, provides opportunity for 
mobile code to cause significant damage to a host system. One obv ... 

Keywords: API hooking, code signing, interrupt table, mobile code, native code, 
sandbox, virus, windows, worm, wrapper 



9 Unk.and cM 
k wjrejess channels 
^ Glenn Judd, Peter Steenkiste 

August 2005 Proceeding of the 2005 ACM SIGCOMM workshop on Experimental 
approaches to wireless network design and analysis E-WIND '05 

Publisher: ACM Press 

Full text available: * M pdf(6.06 MS) Additional Information: full citation, abstract, references, index terra 



Physical layer wireless network emulation has the potential to be a powerful experimental 
tool. An important challenge in physical emulation, and traditional simulation, is to 
accurately model the wireless channel. In this paper we examine the possibility of using 
on-card signal strength measurements to capture wireless channel traces. A key 
advantage of this approach is the simplicity and ubiquity with which these measurements 
can be obtained since virtually all wireless devices provide the req ... 



Keywords: channel capture, emulation, wireless 
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system suppojct.fordjscgn 
^ Yaron Weinsberg, Israel Ben-Shaul 

May 2002 Proceedings of the 24th International Conference on Software 

Engineering 
Publisher: ACM Press 

Full text available: ^.pdfii,28 MBJ Additional Information: full citation, abstract, references, index terms 

The emergence of networked lightweight portable computing devices can potentially 
enable accessibility to a vast array of remote applications and data. In order to cope with 
shortage of local resources such as memory, CPU and bandwidth, such applications are 
typically designed as a thin-client thick-server applications. However, another highly 
desirable yet conflicting requirement is to support disconnected operation, due to the low 
quality and high cost of on-line connectivity. We present a nov ... 

11 Context-aware middieware for mobile muitimedia applications 
^ Oleg Davidyuk, Jukka Riekki, Ville-Mikko Rautio, Junzhao Sun 
^ October 2004 Proceedings of the 3rd international conference on Mobile and 
ubiquitous multimedia MUM '04 
Publisher: ACM Press 

Full text available: ^.pdfi100 ; 37 Kg) Additional Information: Ml .citation, abstract, references 

We present a context-aware middleware for mobile multimedia applications. The 
middleware offers functionality for service discovery, asynchronous messaging, 
publish/subscribe event management, storing and management of context information, 
building the user interface, and handling the local and network resources. It supports a 
wide range of context information including location, time, and user's preferences. 
Further, it allows controlling the connectivity of the device; the middleware is capabl ... 

Keywords: context-aware and mobile computing, multimedia content adaptation 



1 2 Bandom.ized.inMw 

^ Elena Gabrieia Barrantes, David H. Ackley, Stephanie Forrest, Darko Stefanovid 

February 2005 ACM Transactions on Information and System Security (TISSEC), volume 

8 Issue 1 

Publisher: ACM Press 

Full text available: W{ pdf(374.44 KB) Additional Information: full citation, abstract, references , index terms 



Injecting binary code into a running program is a common form of attack. Most defenses 
employ a "guard the doors" approach, blocking known mechanisms of code injection. 
Randomized instruction set emulation (RISE) is a complementary method of defense, one 
that performs a hidden randomization of an application's machine code. If foreign binary 
code is injected into a program running under RISE, it will not be executable because it 
will not know the proper randomization. The pape ... 

Keywords: Automated diversity, randomized instruction sets, software diversity 



13 iMobiie EE: an enterprise mobile service platform Q 
Yih-Farn Chen, Huale Huang, Rittwik Jana, Trevor Jim, Matti Hiltunen, Sam John, Serban 
Jora, Radhakrishnan Muthumanickam, Bin Wei 
July 2003 Wireless Networks, Volume 9 issue 4 

Publisher: Kluwer Academic Publishers 

Full text available: ^pd^M.MB) Additional Information: M-titatiSO. abstract, references, index terms 

iMobile 1 is an enterprise mobile service platform that allows resource-limited mobile 
devices to communicate with each other and to securely access corporate contents and 
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services. The original iMobile architecture consists of devlets that provide protocol 
interfaces to different mobile devices and infolets that access and transcode information 
based on device profiles. iMobile Enterprise Edition (iMobile EE) is a redesign of the 
original iMobile architecture to address the security, ... 

Keywords: content transcoding, middleware, mobile devices, mobile enterprise, mobile 
multimedia services 



14 Programming ianguages for mobile code 
^ Tommy Thorn 

SB£ September 1997 ACM Computing Surveys (CSUR), volume 29 issue 3 
Publisher: ACM Press 

Additional Information: full citation, abstract, references, citings. Index 



Full text available: mpdf(393.65 KB) 

^ terms, review 

Sun's announcement of the programming language Java more that anything popularized 
the notion of mobile code, that is, programs traveling on a heterogeneous network and 
automatically executing upon arrival at the destination. We describe several classes of 
mobile code and extract their common characteristics, where security proves to be one of 
the major concerns. With these characteristics as reference points, we examine six 
representative languages proposed for mobile code. The conclusion ... 

Keywords: Java, Limbo, Objective Caml, Obliq, Safe-Tel, distribution, formal methods, 
mobile code, network programming, object orientation, portability, safety, security, 
telescript 



15 C ons train ts : An approach to engineer and enforce cont^^ Q 

environment 
^ Gustaf Neumann, Mark Strembeck 

June 2003 Proceedings of the eighth ACM symposium on Access control models and 
technologies 

Publisher: ACM Press 

Full text available: * pd*377.68 KB) Additional lnformation: M dtatlon ' references ' 



terms 

This paper presents an approach that uses special purpose RBAC constraints to base 
certain access control decisions on context information. In our approach a context 
constraint is defined as a dynamic RBAC constraint that checks the actual values of one or 
more contextual attributes for predefined conditions. If these conditions are satisfied, the 
corresponding access request can be permitted. Accordingly, a conditional permission is 
an RBAC permission which is constrained by one o ... 

16 Frontmatter (TOC. Letters. Election results. Software Reliability Resources!. Q 
^ Computing Curricula 2004 and the Software Engineering Volume SE2Q04, Software 

^ Reuse Research. ICSE 2005 Forward) 

July 2005 ACM SIGSOFT Software Engineering Notes, volume 30 issue 4 

Publisher: ACM Press 

Full text available: ffi pdff6.19 MB) Additional Information: full citation, index terms 



17 Computing curricula 2001 

^ September 2001 Journal on Educational Resources in Computing (JERIC) 
^ Publisher: ACM Press 



http://portal.acm.org/res^ 2/24/06 



Results (page 1): "digital content" and "downloading" and license and wrapper and polici... Page 6 of 6 
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18 MARE: resource discovery and configuration in ad hoc networks Q 
Matt Storey, Gordon Blair, Adrian Friday 

October 2002 Mobile Networks and Applications, volume i issue 5 
Publisher: Kluwer Academic Publishers 

Full text available: ^ pdf(246.73 K3) Additional Information: full citation, abstract , references, index terms 

The emergence of personal portable devices, such as PDA's and Mobile phones, with 
considerable processing and communication capabilities, has led to a desire to use various 
combinations of these devices together to achieve new and as yet unrealised operations. 
Not only are mobile devices expected to offer conventional facilities like email and web 
browsing but also more demanding multimedia applications. Attaining these operations 
within a fixed network environment with high-power workstations i ... 

Keywords: ad hoc, mobile agents, resource discovery, tuple space 



1 9 Vi sua \ izjn&gepspatj aj. data 
Theresa Marie Rhyne, Aian MacEachern, Theresa-Marie Rhyne 

August 2004 Proceedings of the conference on SIGGRAPH 2004 course notes GRAPH 
'04 

Publisher: ACM Press 

Full text available: Qj)d£13«S3. MB} Additional Information: Ml .citation, abstract. 

This course reviews concepts and highlights new directions in GeoVisualization. We review 
four levels of integrating geospatial data and geographic information systems (GIS) with 
scientific and information visualization (VIS) methods. These include: • Rudimentary: 
minimal data sharing between the GIS and Vis systems* Operational: consistency of 
geospatial data* Functional: transparent communication between the GIS and Vis 
systems* Merged: one comprehensive toolkit environmentW ... 

20 Software engineering for security: a roadmap 
■m^ Premkumar T. Devanbu, Stuart Stubblebine 

™ May 2000 Proceedings of the Conference on The Future of Software Engineering 
Publisher: ACM Press 

Full text available: *P| pdR1.71 M3) Additional Information: fail citation, references , citings, index terms 



Keywords: copy protection, security, software engineering, water-marking 
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